JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.109.41.43

124.109.41.43 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 67%: ?

67%

ISP	Nayatel (Pvt) Ltd
Usage Type	Fixed Line ISP
ASN	AS23674
Domain Name	nayatel.com
Country	🇵🇰 Pakistan
City	Islamabad, Islamabad

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.109.41.43

Whois 124.109.41.43

IP Abuse Reports for 124.109.41.43:

This IP address has been reported a total of 20 times from 11 distinct sources. 124.109.41.43 was first reported on October 19th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bancix	2026-10-22 07:42:09 (2 hours ago)	Heimdallr NIDS: Automatic ban triggered. Reason: TRAP_PORT_HIT (porta 1433)	Port Scan
🇸🇬 drewf.ink	2026-10-22 02:09:59 (8 hours ago)	[02:09] Attempted MSSQL login as 'admin' with password: @D***26 (hostname='DBSERVER' appname='.Net ... show more [02:09] Attempted MSSQL login as 'admin' with password: @D***26 (hostname='DBSERVER' appname='.Net SqlClient Data Provider' database='Master') show less	Brute-Force Hacking
🇸🇬 drewf.ink	2026-10-22 01:54:58 (8 hours ago)	[01:54] Attempted MSSQL login as 'admin' with password: p@******23 (hostname='DBSERVER' appname='. ... show more [01:54] Attempted MSSQL login as 'admin' with password: p@******23 (hostname='DBSERVER' appname='.Net SqlClient Data Provider' database='Master') show less	Brute-Force Hacking
🇩🇪 Tsumugi Kotobuki	2026-10-22 01:40:41 (8 hours ago)	Port Scan on Honeypot \| Ports: 1433/MSSQL \| Proto: TCP(1) \| Flags: all SYN \| TTL: 112 \| Len: 52B \| W ... show more Port Scan on Honeypot \| Ports: 1433/MSSQL \| Proto: TCP(1) \| Flags: all SYN \| TTL: 112 \| Len: 52B \| Win: 64240(1) \| rDNS: mbl-109-41-43.dsl.net.pk \| F2B/ufw-honeypot@2026-10-22T01:40:41Z show less	Port Scan Hacking
🇸🇬 drewf.ink	2026-10-22 01:39:55 (8 hours ago)	[01:39] Attempted MSSQL login as 'admin' with password: p@****.. (hostname='DBSERVER' appname='.Ne ... show more [01:39] Attempted MSSQL login as 'admin' with password: p@****.. (hostname='DBSERVER' appname='.Net SqlClient Data Provider' database='Master') show less	Brute-Force Hacking
🇸🇬 drewf.ink	2026-10-22 01:24:53 (9 hours ago)	[01:24] Attempted MSSQL login as 'sa' with password: Z****x (hostname='DBSERVER' appname='.Net Sql ... show more [01:24] Attempted MSSQL login as 'sa' with password: Z****x (hostname='DBSERVER' appname='.Net SqlClient Data Provider' database='Master') show less	Brute-Force Hacking
🇸🇬 drewf.ink	2026-10-22 01:09:53 (9 hours ago)	[01:09] Attempted MSSQL login as 'sa' with password: pa********@# (hostname='DBSERVER' appname='.N ... show more [01:09] Attempted MSSQL login as 'sa' with password: pa********@# (hostname='DBSERVER' appname='.Net SqlClient Data Provider' database='Master') show less	Brute-Force Hacking
🇸🇬 drewf.ink	2026-10-22 00:54:52 (9 hours ago)	[00:54] Connected to MSSQL honeypot	Brute-Force Hacking
🇺🇸 avgsmoe	2026-10-21 18:35:42 (16 hours ago)	Connection to a honeypot port. Automated report (firemon).	Port Scan
🇫🇮 6kilowatti	2026-10-21 06:36:18 (1 day ago)	2026-10-21T09:36:17.822978+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-10-21T09:36:17.822978+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=124.109.41.43 DST=5.61.88.83 LEN=52 TOS=0x02 PREC=0x00 TTL=109 ID=58800 DF PROTO=TCP SPT=30819 DPT=1433 WINDOW=64240 RES=0x00 CWR ECE SYN URGP=0 ... show less	Port Scan
🇫🇷 Kejult	2026-10-20 20:12:09 (1 day ago)	Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 176 authentication events observ ... show more Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 176 authentication events observed across 176 source port(s); target port(s): 1433. show less	Brute-Force
🇺🇸 seajaydaboi36	2026-10-20 05:01:24 (2 days ago)	Automated detection: unsolicited connection to Pterodactyl Wings server.	Port Scan Hacking Brute-Force
🇵🇱 bart@	2026-10-19 20:52:21 (2 days ago)	Automated scan detection against redacted protected targets. Hits=2; port 1433 proto 6 detection hon ... show more Automated scan detection against redacted protected targets. Hits=2; port 1433 proto 6 detection honeypot_tcp show less	Port Scan
🇫🇷 Kejult	2026-10-19 19:33:36 (2 days ago)	Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 865 authentication events observ ... show more Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 865 authentication events observed across 879 source port(s); target port(s): 1433. show less	Brute-Force
🇺🇸 xmission.com	2026-10-19 18:30:55 (2 days ago)	Blocked by UFW (TCP on 1433) Source port: 62416 TTL: 109 Packet length: 52 TOS: 0x02 This report (f ... show more Blocked by UFW (TCP on 1433) Source port: 62416 TTL: 109 Packet length: 52 TOS: 0x02 This report (for 124.109.41.43) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.203.163.10

🇨🇴 181.204.26.163

🇭🇰 139.198.113.29

🇩🇪 130.12.180.174

🇻🇳 103.28.38.27

🇬🇧 78.153.140.236

🇷🇺 31.173.66.222

🇸🇦 2.88.102.45

🇰🇷 199.241.120.131

🇨🇴 190.5.200.98

🇻🇳 103.153.65.59

🇬🇧 86.38.187.144

🇫🇷 82.127.132.221

🇱🇹 62.60.130.253

🇺🇸 50.6.200.124

🇮🇪 18.201.21.223

🇭🇰 8.218.117.197

🇮🇳 2401:4900:1c5b:41d3:7c16:327:145f:634a

🇺🇸 192.0.89.51

🇲🇽 189.244.107.78